# Vulnerabilities published in 2013


- [CVE-2013-4171](https://insights.sbomify.com/CVE-2013-4171/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4170](https://insights.sbomify.com/CVE-2013-4170/): Ember.js Potential XSS Exploit When Binding `tagName` to User-Supplied Data (medium 6.1)
- [CVE-2013-4169](https://insights.sbomify.com/CVE-2013-4169/): Path traversal in n/a (medium 6.9)
- [CVE-2013-4168](https://insights.sbomify.com/CVE-2013-4168/): Cross-site scripting in SmokePing (medium 6.1)
- [CVE-2013-4167](https://insights.sbomify.com/CVE-2013-4167/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4166](https://insights.sbomify.com/CVE-2013-4166/): Information disclosure in Evolution (high 7.5)
- [CVE-2013-4165](https://insights.sbomify.com/CVE-2013-4165/): Information disclosure in n/a (medium 4.3)
- [CVE-2013-4164](https://insights.sbomify.com/CVE-2013-4164/): Memory corruption in n/a (medium 6.8)
- [CVE-2013-4163](https://insights.sbomify.com/CVE-2013-4163/): Denial of service in n/a (medium 4.7)
- [CVE-2013-4162](https://insights.sbomify.com/CVE-2013-4162/): Denial of service in n/a (medium 4.7)
- [CVE-2013-4161](https://insights.sbomify.com/CVE-2013-4161/): Privilege escalation in gksu-polkit-0.0.3-6.fc18 (high 7.8)
- [CVE-2013-4160](https://insights.sbomify.com/CVE-2013-4160/): Null dereference in n/a (medium 5.0)
- [CVE-2013-4159](https://insights.sbomify.com/CVE-2013-4159/): Other in n/a (high 7.5)
- [CVE-2013-4158](https://insights.sbomify.com/CVE-2013-4158/): Cross-site scripting in smokeping (medium 6.1)
- [CVE-2013-4157](https://insights.sbomify.com/CVE-2013-4157/): Path traversal in n/a (low 3.6)
- [CVE-2013-4156](https://insights.sbomify.com/CVE-2013-4156/): Memory corruption in n/a (medium 6.8)
- [CVE-2013-4155](https://insights.sbomify.com/CVE-2013-4155/): OpenStack Swift allows authenticated users to cause a denial of service (medium 4.0)
- [CVE-2013-4154](https://insights.sbomify.com/CVE-2013-4154/): Null dereference in n/a (medium 4.3)
- [CVE-2013-4153](https://insights.sbomify.com/CVE-2013-4153/): Use after free in n/a (medium 5.0)
- [CVE-2013-4152](https://insights.sbomify.com/CVE-2013-4152/): Cross-Site Request Forgery in Spring Framework (medium 6.8)
- [CVE-2013-4151](https://insights.sbomify.com/CVE-2013-4151/): Memory corruption in n/a (high 7.5)
- [CVE-2013-4150](https://insights.sbomify.com/CVE-2013-4150/): Memory corruption in n/a (high 7.5)
- [CVE-2013-4149](https://insights.sbomify.com/CVE-2013-4149/): Memory corruption in n/a (high 7.5)
- [CVE-2013-4148](https://insights.sbomify.com/CVE-2013-4148/): Integer overflow in n/a (high 7.5)
- [CVE-2013-4147](https://insights.sbomify.com/CVE-2013-4147/): Other in n/a (high 7.5)
- [CVE-2013-4144](https://insights.sbomify.com/CVE-2013-4144/): Deserialization in swfupload wordpress plugin (critical 9.8)
- [CVE-2013-4143](https://insights.sbomify.com/CVE-2013-4143/): Auth bypass in n/a (low 2.1)
- [CVE-2013-4140](https://insights.sbomify.com/CVE-2013-4140/): Cross-site scripting in n/a (low 2.1)
- [CVE-2013-4139](https://insights.sbomify.com/CVE-2013-4139/): Denial of service in n/a (medium 5.0)
- [CVE-2013-4138](https://insights.sbomify.com/CVE-2013-4138/): Cross-site scripting in n/a (low 2.1)
- [CVE-2013-4137](https://insights.sbomify.com/CVE-2013-4137/): SQL injection in n/a (high 7.5)
- [CVE-2013-4136](https://insights.sbomify.com/CVE-2013-4136/): insecure temporary directory usage in passenger (medium 4.4)
- [CVE-2013-4135](https://insights.sbomify.com/CVE-2013-4135/): Information disclosure in n/a (medium 4.3)
- [CVE-2013-4134](https://insights.sbomify.com/CVE-2013-4134/): Weak cryptography in n/a (medium 4.3)
- [CVE-2013-4133](https://insights.sbomify.com/CVE-2013-4133/): Denial of service in kde-workspace (high 7.5)
- [CVE-2013-4132](https://insights.sbomify.com/CVE-2013-4132/): Null dereference in n/a (medium 5.0)
- [CVE-2013-4131](https://insights.sbomify.com/CVE-2013-4131/): Denial of service in n/a (medium 4.0)
- [CVE-2013-4130](https://insights.sbomify.com/CVE-2013-4130/): Denial of service in n/a (medium 5.0)
- [CVE-2013-4129](https://insights.sbomify.com/CVE-2013-4129/): Denial of service in n/a (medium 4.7)
- [CVE-2013-4128](https://insights.sbomify.com/CVE-2013-4128/): Auth bypass in n/a (medium 6.4)
- [CVE-2013-4127](https://insights.sbomify.com/CVE-2013-4127/): Use after free in n/a (medium 4.7)
- [CVE-2013-4125](https://insights.sbomify.com/CVE-2013-4125/): Denial of service in n/a (medium 5.4)
- [CVE-2013-4124](https://insights.sbomify.com/CVE-2013-4124/): Integer overflow in n/a (medium 5.0)
- [CVE-2013-4123](https://insights.sbomify.com/CVE-2013-4123/): Denial of service in n/a (medium 5.0)
- [CVE-2013-4122](https://insights.sbomify.com/CVE-2013-4122/): Null dereference in n/a (medium 4.3)
- [CVE-2013-4120](https://insights.sbomify.com/CVE-2013-4120/): Denial of service in Katello (high 7.5)
- [CVE-2013-4119](https://insights.sbomify.com/CVE-2013-4119/): Null dereference in n/a (high 7.5)
- [CVE-2013-4118](https://insights.sbomify.com/CVE-2013-4118/): Null dereference in n/a (high 7.5)
- [CVE-2013-4117](https://insights.sbomify.com/CVE-2013-4117/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4116](https://insights.sbomify.com/CVE-2013-4116/): Local Privilege Escalation in npm (low 3.3)
- [CVE-2013-4115](https://insights.sbomify.com/CVE-2013-4115/): Memory corruption in n/a (high 7.5)
- [CVE-2013-4114](https://insights.sbomify.com/CVE-2013-4114/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-4113](https://insights.sbomify.com/CVE-2013-4113/): Memory corruption in n/a (medium 6.8)
- [CVE-2013-4112](https://insights.sbomify.com/CVE-2013-4112/): Exposure of Sensitive Information to an Unauthorized Actor in JGroup (medium 5.4)
- [CVE-2013-4111](https://insights.sbomify.com/CVE-2013-4111/): python-glanceclient vulnerable to SSL server spoofing due to unverified X.509 certificate (medium 5.8)
- [CVE-2013-4110](https://insights.sbomify.com/CVE-2013-4110/): Information disclosure in Cryptocat (medium 5.3)
- [CVE-2013-4109](https://insights.sbomify.com/CVE-2013-4109/): Cross-site scripting in Message Handling (medium 6.1)
- [CVE-2013-4108](https://insights.sbomify.com/CVE-2013-4108/): Multiple unspecified vulnerabilities in Cryptocat Project Cryptocat 2.0.18 have unknown impact and attack vectors. (critical 9.8)
- [CVE-2013-4107](https://insights.sbomify.com/CVE-2013-4107/): Cross-site scripting in Cryptocat (medium 6.1)
- [CVE-2013-4106](https://insights.sbomify.com/CVE-2013-4106/): Cross-site scripting in Cryptocat (medium 6.1)
- [CVE-2013-4105](https://insights.sbomify.com/CVE-2013-4105/): Information disclosure in Cryptocat (high 7.5)
- [CVE-2013-4104](https://insights.sbomify.com/CVE-2013-4104/): Weak cryptography in n/a (high 7.5)
- [CVE-2013-4103](https://insights.sbomify.com/CVE-2013-4103/): Cross-site scripting in n/a (critical 9.8)
- [CVE-2013-4102](https://insights.sbomify.com/CVE-2013-4102/): Weak cryptography in n/a (critical 9.1)
- [CVE-2013-4101](https://insights.sbomify.com/CVE-2013-4101/): Cross-site scripting in n/a (medium 5.3)
- [CVE-2013-4100](https://insights.sbomify.com/CVE-2013-4100/): Denial of service in n/a (high 7.5)
- [CVE-2013-4099](https://insights.sbomify.com/CVE-2013-4099/): Memory corruption in n/a (critical 10.0)
- [CVE-2013-4098](https://insights.sbomify.com/CVE-2013-4098/): Cross-site scripting in n/a (medium 5.0)
- [CVE-2013-4097](https://insights.sbomify.com/CVE-2013-4097/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-4096](https://insights.sbomify.com/CVE-2013-4096/): Command injection in n/a (critical 9.0)
- [CVE-2013-4095](https://insights.sbomify.com/CVE-2013-4095/): Command injection in n/a (medium 6.5)
- [CVE-2013-4094](https://insights.sbomify.com/CVE-2013-4094/): File upload in n/a (medium 6.5)
- [CVE-2013-4093](https://insights.sbomify.com/CVE-2013-4093/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-4092](https://insights.sbomify.com/CVE-2013-4092/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-4091](https://insights.sbomify.com/CVE-2013-4091/): Information disclosure in n/a (high 7.5)
- [CVE-2013-4090](https://insights.sbomify.com/CVE-2013-4090/): Varnish HTTP cache before 3.0.4: ACL bug (high 7.5)
- [CVE-2013-4088](https://insights.sbomify.com/CVE-2013-4088/): Information disclosure in n/a (medium 6.5)
- [CVE-2013-4083](https://insights.sbomify.com/CVE-2013-4083/): Denial of service in n/a (medium 5.0)
- [CVE-2013-4082](https://insights.sbomify.com/CVE-2013-4082/): Memory corruption in n/a (medium 5.0)
- [CVE-2013-4081](https://insights.sbomify.com/CVE-2013-4081/): Denial of service in n/a (medium 5.0)
- [CVE-2013-4080](https://insights.sbomify.com/CVE-2013-4080/): Denial of service in n/a (medium 5.0)
- [CVE-2013-4079](https://insights.sbomify.com/CVE-2013-4079/): Denial of service in n/a (medium 5.0)
- [CVE-2013-4078](https://insights.sbomify.com/CVE-2013-4078/): Denial of service in n/a (medium 5.0)
- [CVE-2013-4077](https://insights.sbomify.com/CVE-2013-4077/): Denial of service in n/a (medium 5.0)
- [CVE-2013-4076](https://insights.sbomify.com/CVE-2013-4076/): Memory corruption in n/a (medium 5.0)
- [CVE-2013-4075](https://insights.sbomify.com/CVE-2013-4075/): Denial of service in n/a (medium 5.0)
- [CVE-2013-4074](https://insights.sbomify.com/CVE-2013-4074/): Denial of service in n/a (medium 5.0)
- [CVE-2013-4073](https://insights.sbomify.com/CVE-2013-4073/): Security feature bypass in n/a (medium 6.8)
- [CVE-2013-4070](https://insights.sbomify.com/CVE-2013-4070/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-4069](https://insights.sbomify.com/CVE-2013-4069/): XML external entity in n/a (medium 5.0)
- [CVE-2013-4068](https://insights.sbomify.com/CVE-2013-4068/): Memory corruption in n/a (high 7.1)
- [CVE-2013-4067](https://insights.sbomify.com/CVE-2013-4067/): Other in n/a (medium 5.8)
- [CVE-2013-4066](https://insights.sbomify.com/CVE-2013-4066/): Other in n/a (medium 4.3)
- [CVE-2013-4065](https://insights.sbomify.com/CVE-2013-4065/): Cross-site scripting in n/a (low 2.6)
- [CVE-2013-4064](https://insights.sbomify.com/CVE-2013-4064/): Cross-site scripting in n/a (low 2.1)
- [CVE-2013-4063](https://insights.sbomify.com/CVE-2013-4063/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4062](https://insights.sbomify.com/CVE-2013-4062/): Weak cryptography in n/a (medium 6.8)
- [CVE-2013-4061](https://insights.sbomify.com/CVE-2013-4061/): Missing authorization in n/a (medium 4.0)
- [CVE-2013-4059](https://insights.sbomify.com/CVE-2013-4059/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4058](https://insights.sbomify.com/CVE-2013-4058/): SQL injection in n/a (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2013/page/26/